Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/B54AC7C80A9D11EE985BF2334AD9E6FC.roa
File: B54AC7C80A9D11EE985BF2334AD9E6FC.roa (raw, json)
Hash identifier: 5GeL0Czu/2etXZ5gA3VSe87hGnbfOU48c/oQ6DlZFyk=
Subject key identifier: 5A:39:63:A5:F3:29:24:AE:73:80:94:C0:15:EB:F4:55:05:45:0E:5F
Certificate issuer: /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial: 20
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/B54AC7C80A9D11EE985BF2334AD9E6FC.roa
Signing time: Wed 14 Jun 2023 10:24:56 +0000
ROA not before: Wed 14 Jun 2023 10:24:53 +0000
ROA not after: Thu 15 Jun 2028 10:24:53 +0000
asID: 37358
IP address blocks: 41.79.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Validity
Not Before: Jun 14 10:24:53 2023 GMT
Not After : Jun 15 10:24:53 2028 GMT
Subject: CN=64899578-46a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:72:6a:4a:c2:49:c8:14:eb:1e:cc:e1:4d:
48:a3:4b:4a:41:43:68:1c:46:4d:74:b7:8a:d5:f6:
90:45:39:08:55:94:18:ee:3d:fb:42:96:bb:06:41:
ee:17:7f:ef:a6:24:70:e0:90:b9:fb:1e:de:df:5a:
e0:94:8a:ac:91:98:d1:f4:8d:8e:19:ee:55:a8:d2:
04:17:98:00:4d:87:a4:62:57:e5:47:d3:1a:c6:87:
bb:cd:0c:cd:fb:77:bf:82:8a:3b:78:4a:80:a8:c0:
e0:58:86:ba:25:85:12:3e:32:bf:05:24:50:66:b6:
c7:25:dc:22:e4:2e:82:ed:a8:30:82:ee:67:97:cc:
73:97:ec:d3:fc:de:75:bb:29:77:79:7f:33:3e:1c:
35:9f:82:ef:9f:47:1a:b4:ed:26:b1:da:3c:f7:19:
e5:b7:3e:94:06:fc:51:58:be:c6:a9:3a:de:73:5b:
40:37:ea:39:51:f1:cf:d6:08:a7:1c:65:1c:d0:2b:
5d:6f:45:b6:a2:3c:63:a5:34:65:3c:9b:7a:32:a0:
9e:ea:7b:9f:46:a6:ff:22:96:57:2f:0d:ef:af:bf:
8c:4f:6b:ff:02:7b:78:c6:8c:2b:b0:7d:c6:a6:db:
79:80:b2:0f:25:a4:a7:11:a5:58:78:10:88:5a:a2:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:63:A5:F3:29:24:AE:73:80:94:C0:15:EB:F4:55:05:45:0E:5F
X509v3 Authority Key Identifier:
keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/B54AC7C80A9D11EE985BF2334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:b9:f6:39:82:9d:9e:1d:4f:37:66:33:bd:25:06:f3:b9:82:
a0:42:c5:e5:5b:f9:76:60:9c:ea:39:94:9a:a7:44:25:e2:b4:
28:a0:3b:c9:c0:7b:1c:8e:6e:6a:b8:ed:40:1a:7f:d4:b5:23:
fb:10:99:47:cd:49:41:73:7e:19:b3:15:50:e6:a7:a5:82:69:
70:b3:fb:1c:68:83:31:f1:41:d3:94:f1:b1:97:1e:e7:e9:ca:
8a:85:a2:ad:e2:a8:c7:b0:7c:9a:db:ca:92:a8:3d:83:12:09:
28:b5:6c:13:dc:d4:d3:cd:43:9b:0e:28:7e:ff:e7:68:56:78:
b9:31:16:0a:14:bf:35:66:04:12:88:ca:75:a5:97:0d:cc:f0:
f8:b3:8c:53:37:9b:6f:81:7e:d9:7e:dc:ee:1b:b9:fd:5f:c2:
39:85:94:8c:2d:be:2b:e9:76:0f:1d:27:c9:21:c1:7e:23:8e:
20:ca:af:f3:d2:27:9b:f9:52:f1:3a:8a:1d:9e:bd:b3:17:83:
df:a0:43:d5:70:6f:c0:15:83:b5:00:40:b1:c0:10:da:0f:df:
66:2d:cf:97:bb:0d:32:62:35:54:bc:78:02:6b:32:3f:a1:50:
34:51:0a:7a:93:3c:c4:94:5a:57:41:9e:ff:76:c9:d4:b6:85:
63:88:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:34 2024 by rpki-client on console-ams.rpki-client.org